Vulnerability Details CVE-2019-8411
admin/dl_data.php in zzcms 2018 (2018-10-19) allows remote attackers to delete arbitrary files via action=del&filename=../ directory traversal.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 6.4
Products affected by CVE-2019-8411
-
cpe:2.3:a:zzcms:zzcms:2018